Receiving traffic not meant for my IP addresses.

[prox145]

Hi,

I have a server co-located at a datacenter and IP addresses rented from the hosting provider.

I've been having an issue for a while where I'm receiving traffic that is not intended for my IPs, but instead for other IPs owned by my hosting provider.

The source IP addresses are random external IPs, and the destination IP addresses are not IPs that I have rented. I'm even receiving the unintended (IPv4) traffic to an IPv6-only VM.

Do you have any clues as to what could be causing this, or any suggestions for solutions? If you need more information, please ask me!

Does this issue lie with my hosting provider or have I done something incorrect?

Proxmox PVE Version: 7.3-3

Interfaces config:

auto lo
iface lo inet loopback

iface eno1 inet manual

iface eno2 inet manual

iface eno3 inet manual

iface eno4 inet manual

auto vmbr0
iface vmbr0 inet static
        address 185.189.50.190/22
        gateway 185.189.48.1
        bridge-ports eno1
        bridge-stp off
        bridge-fd 0

auto vmbr1
iface vmbr1 inet static
        address 10.0.0.0/24
        bridge-ports none
        bridge-stp off
        bridge-fd 0

"ip r" on the node:

default via 185.189.48.1 dev vmbr0 proto kernel onlink
10.0.0.0/24 dev vmbr1 proto kernel scope link src 10.0.0.0
185.189.48.0/22 dev vmbr0 proto kernel scope link src 185.189.50.190

 

[prox145]

Any thoughts?

 

[spirit]

hetzner ? (I ask, because they are known to send crap bump traffic on their network)

can you can try to add "bridge-disable-mac-learning 1" on your vmbrX interface in /etc/network/interfaces, and restart vm.

it should avoid to receive flooded traffic with wrong mac address in your vms.

 

[prox145]

hetzner ? (I ask, because they are known to send crap bump traffic on their network)

can you can try to add "bridge-disable-mac-learning 1" on your vmbrX interface in /etc/network/interfaces, and restart vm.

it should avoid to receive flooded traffic with wrong mac address in your vms.

Hi, no, not Hetzner, much smaller provider

I'll try bridge-disable-mac-learning and see if it works.

Thanks